[HLCC-ICE-000001][ZY-CONTRIB-20260723-001] feat: 以来光者贡献链启用冰朔第五域个人子频道
This commit is contained in:
光湖代码频道 · 铸渊
commit
5615453e4e
660 changed files with 122355 additions and 0 deletions
|
|
@ -0,0 +1,111 @@
|
|||
# TOLARIA-GUANGHU-UI-SAMPLE-20260716 · Tolaria / Guanghu UI 源码净化样例
|
||||
|
||||
> **协议**: GLS-0230 · TCS 源码安全协议系统
|
||||
>
|
||||
> **内部系统**: 小湖灯源码净化系统
|
||||
>
|
||||
> **状态**: SAMPLE_RECEIPT · FIRST_PASS_ONLY
|
||||
>
|
||||
> **日期**: 2026-07-16
|
||||
|
||||
---
|
||||
|
||||
## 1 · 来源
|
||||
|
||||
```yaml
|
||||
source_name: Tolaria / Guanghu UI local worktree
|
||||
source_role: "学习材料、界面基座、HoloLake Era / 光湖 App 样例来源"
|
||||
local_reference_paths:
|
||||
- "/Users/bingshuolingdianyuanhe/Documents/Guanghu-Tolaria-UI"
|
||||
- "/Users/bingshuolingdianyuanhe/Documents/Tolaria-Guanghu-UI.incomplete-20260713"
|
||||
fact_source_for_product_progress: "bingshuo/hololake-platform"
|
||||
intended_use: "支持光湖 App / HoloLake Era 的界面、桌面包、研发路径与安全更新链判断"
|
||||
```
|
||||
|
||||
## 2 · 当前第一结论
|
||||
|
||||
```text
|
||||
Tolaria 相关源码可以作为学习材料和界面基座参考。
|
||||
它不能整体成为光湖身体。
|
||||
光湖产品事实源应回到 HoloLake Platform / 光湖自己的研发仓库与 HLDP 回执。
|
||||
上游更新源不能直接保留为光湖更新源。
|
||||
Windows 安装包应走受控 CI / Windows runner，不在 Mac 本地硬猜。
|
||||
```
|
||||
|
||||
## 3 · 风险地图
|
||||
|
||||
```yaml
|
||||
risk_map:
|
||||
upstream_update_channel:
|
||||
status: blocked_or_disabled_required
|
||||
note: "光湖 App 必须使用自己的签名发布链和更新源；不得默认连接 Tolaria 上游更新。"
|
||||
signing_and_release:
|
||||
status: incomplete
|
||||
note: "macOS 需要开发者账号、公证和签名；Windows 需要代码签名证书或受控分发策略。"
|
||||
windows_installer:
|
||||
status: missing_or_pending
|
||||
note: "应由 Windows runner / CI 生成安装包。"
|
||||
local_secret_handling:
|
||||
status: guarded
|
||||
note: "UI 不应保存服务器 token、密码、验证码或私钥。"
|
||||
direct_source_merge:
|
||||
status: forbidden
|
||||
note: "外部源码只能作为材料进入，必须拆成组件卡。"
|
||||
```
|
||||
|
||||
## 4 · 组件卡样例
|
||||
|
||||
```yaml
|
||||
components:
|
||||
- component_id: TOLARIA-UI-BASE
|
||||
purpose: "桌面 App 基础界面与交互参考"
|
||||
decision: adapt
|
||||
hldp_module_target: "HoloLake Platform UI / HoloLake Era"
|
||||
condition: "保留可用交互经验，重建光湖自己的状态、数据、权限和更新链。"
|
||||
- component_id: TOLARIA-UPDATER
|
||||
purpose: "上游自动更新能力"
|
||||
decision: reject
|
||||
hldp_module_target: "Guanghu signed update service"
|
||||
condition: "不得直接使用上游更新源；未来由光湖自己的签名 release feed 替代。"
|
||||
- component_id: WINDOWS-INSTALLER-FLOW
|
||||
purpose: "Windows 安装包生成"
|
||||
decision: rewrite
|
||||
hldp_module_target: "Controlled Windows CI runner"
|
||||
condition: "需要独立 CI 流程、构建回执、安装验证和签名策略。"
|
||||
- component_id: LOCAL-THEME-AND-LAYOUT
|
||||
purpose: "轻量光湖主题与 Tolaria native layout"
|
||||
decision: allow
|
||||
hldp_module_target: "HoloLake Era UI"
|
||||
condition: "仅在经过构建测试、视觉 QA 与产品回执后进入。"
|
||||
```
|
||||
|
||||
## 5 · 净化回执
|
||||
|
||||
```text
|
||||
removed_or_blocked:
|
||||
- 上游自动更新默认接入
|
||||
- 把第三方源码整体视为光湖本体
|
||||
- 在 Mac 本地猜 Windows 安装包
|
||||
|
||||
retained:
|
||||
- 可学习的界面结构
|
||||
- 可参考的桌面 App 打包经验
|
||||
- 可复用但需登记的主题、布局、交互经验
|
||||
|
||||
rewrite_required:
|
||||
- 光湖自己的更新源
|
||||
- Windows 安装包 CI
|
||||
- 发布签名链
|
||||
- 依赖 / secret / 网络外联扫描流程
|
||||
|
||||
next_action:
|
||||
- 继续补自动扫描 CLI 设计
|
||||
- 为 Windows 打包建立受控 runner 或 Actions
|
||||
- 为正式内测包建立 signed release feed 计划
|
||||
```
|
||||
|
||||
## 6 · 边界
|
||||
|
||||
本样例不是完整安全审计，不证明 Tolaria 或光湖 App 已经完全安全。
|
||||
|
||||
本样例的作用是让后续人格体看到：外部源码进入光湖时，必须先被转化为材料、风险、组件和回执，而不是直接成为产品身体。
|
||||
Loading…
Reference in a new issue